Skip to content

Static analysis tool: snyk test#79

Open
njouud wants to merge 1 commit into
f24from
snyk-test
Open

Static analysis tool: snyk test#79
njouud wants to merge 1 commit into
f24from
snyk-test

Conversation

@njouud
Copy link
Copy Markdown

@njouud njouud commented Oct 23, 2024

Pull request for testing the codebase with snyk, a static analysis tool. Snyk scans the dependencies of the codebase for vulnerabilities (security risks).

1. Process:
installed the tool withnpm install -g snyk, then made a snyk account with snyk auth to be able to run tests, then finally snyk test to run the test scan, where the output is given in the terminal (screenshots below).

2. Changed files:
package.json: manually added the tool in the dev dependencies with "snyk": "1.1293.1".
.snyk: created a new file in the root of the application to add the dependencies snyk should ignore (with specifying the reason for ignoring).

3. Terminal output screenshots:
Screenshot 2024-10-23 at 9 22 39 PM
Screenshot 2024-10-23 at 9 22 45 PM

4. package.json changes:
Screenshot 2024-10-23 at 10 21 09 PM

@coveralls
Copy link
Copy Markdown

Pull Request Test Coverage Report for Build 11485909974

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 82.372%

Totals Coverage Status
Change from base Build 11459547874: 0.0%
Covered Lines: 22369
Relevant Lines: 25711

💛 - Coveralls

@njouud njouud changed the title Tool integration: snyk test Analysis tool: snyk test Oct 23, 2024
@njouud njouud changed the title Analysis tool: snyk test Static analysis tool: snyk test Oct 23, 2024
@njouud njouud self-assigned this Oct 24, 2024
@njouud njouud requested a review from Procos12 October 24, 2024 12:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants